Backport CVE-2026-10846 fix from upstream ldns 1.9.0 to 1.7.0.
The patch adds DNS response validation including source address
verification, transaction ID matching, query section count
validation, and response question matching against the original
query. New error status codes are added for specific failure
modes.
CVE: CVE-2026-10846
Upstream patches:
- https://src.fedoraproject.org/rpms/ldns/raw/rawhide/f/ldns-1.9.0-CVE-2026-10846.patch
Resolves: RHEL-210700
This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.
Assisted-by: Ymir
